Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/3137372e36372e3136302e302f32322d3234203d3e20323731373030.roa
File:                     3137372e36372e3136302e302f32322d3234203d3e20323731373030.roa (raw, json)
Hash identifier:          6gTHylxmDagSDm4ZX+vSn2nDG7paPE+65J921H0Tjok=
Subject key identifier:   69:56:34:83:3E:86:E1:AB:32:9D:38:C3:22:50:94:DE:A5:82:12:70
Certificate issuer:       /CN=DCACBC52FA698E261DF1082C2450AB6A410E6741
Certificate serial:       47B044293542FF20862F272F9EA404151FE8AF5A
Authority key identifier: DC:AC:BC:52:FA:69:8E:26:1D:F1:08:2C:24:50:AB:6A:41:0E:67:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCACBC52FA698E261DF1082C2450AB6A410E6741.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/3137372e36372e3136302e302f32322d3234203d3e20323731373030.roa
Signing time:             Wed 09 Jul 2025 20:05:01 +0000
ROA not before:           Wed 09 Jul 2025 20:00:01 +0000
ROA not after:            Wed 08 Jul 2026 20:05:01 +0000
asID:                     271700
IP address blocks:        177.67.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/DCACBC52FA698E261DF1082C2450AB6A410E6741.crl
                          rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/DCACBC52FA698E261DF1082C2450AB6A410E6741.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCACBC52FA698E261DF1082C2450AB6A410E6741.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 13:45:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:b0:44:29:35:42:ff:20:86:2f:27:2f:9e:a4:04:15:1f:e8:af:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCACBC52FA698E261DF1082C2450AB6A410E6741
        Validity
            Not Before: Jul  9 20:00:01 2025 GMT
            Not After : Jul  8 20:05:01 2026 GMT
        Subject: CN=695634833E86E1AB329D38C3225094DEA5821270
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:90:19:6e:4b:e0:67:42:ba:c3:1b:39:48:58:
                    f9:e7:57:67:fa:f5:7b:1a:e2:24:8f:e2:41:33:5e:
                    1a:ef:aa:10:6d:47:45:74:51:eb:09:1a:c7:97:7d:
                    62:33:dd:bd:cc:78:bc:88:70:36:4d:2e:e0:ad:bd:
                    0f:c5:84:8e:f3:fc:1d:eb:31:12:54:c0:fb:28:e1:
                    e1:96:ad:99:5a:f4:7b:ca:0f:07:1f:59:45:76:18:
                    37:45:59:5b:a4:0e:eb:80:df:e9:86:c9:4c:8e:38:
                    94:48:3d:e1:9e:2a:60:e8:3f:f1:4d:8e:a3:80:55:
                    ee:58:f6:ef:0e:71:99:6f:b6:1e:70:68:42:7b:81:
                    5d:fc:69:af:3f:8b:62:08:04:9e:0e:28:2e:05:74:
                    8b:7b:0b:e7:38:4f:b5:05:62:0f:be:32:af:71:cf:
                    0f:ec:ea:56:16:a7:60:ee:4f:b4:16:dc:90:1f:d3:
                    99:f5:d1:ad:6c:e1:a6:cf:97:d5:19:11:96:80:79:
                    e9:2d:8e:0c:ca:56:3a:27:b0:c2:94:b5:fc:d4:6d:
                    8e:f5:a9:c2:f9:f6:bc:df:5b:5a:7c:1d:7c:53:c2:
                    3e:70:f0:e3:d0:c7:a1:6e:26:63:24:ba:50:a7:90:
                    c3:c9:df:c8:da:0e:4a:ed:5c:00:2b:f0:81:f6:ec:
                    80:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:56:34:83:3E:86:E1:AB:32:9D:38:C3:22:50:94:DE:A5:82:12:70
            X509v3 Authority Key Identifier:
                keyid:DC:AC:BC:52:FA:69:8E:26:1D:F1:08:2C:24:50:AB:6A:41:0E:67:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/DCACBC52FA698E261DF1082C2450AB6A410E6741.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCACBC52FA698E261DF1082C2450AB6A410E6741.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/3137372e36372e3136302e302f32322d3234203d3e20323731373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:00:c0:2c:53:c5:98:20:95:98:69:9f:4f:cf:d5:c5:17:8b:
         b8:c2:47:29:8a:9a:bb:40:e3:19:32:78:23:ff:e7:84:c0:44:
         5a:31:5e:22:69:ad:07:e2:e5:d4:d3:12:c2:af:5d:a5:d2:ac:
         c9:21:37:f5:31:17:02:aa:bd:1c:fe:c9:9d:49:c2:2e:f5:47:
         69:0c:a7:92:35:60:e1:83:08:89:2c:88:4b:6d:9a:19:ce:80:
         35:60:6a:58:d3:29:a7:5c:de:55:d2:b8:47:51:4b:2c:9a:3f:
         c3:5d:9b:07:13:f3:24:1a:f0:66:fc:4c:29:e8:78:a5:14:06:
         79:25:83:10:a6:1f:44:f1:55:1b:57:17:bb:10:22:2f:24:a6:
         3c:e3:e3:19:31:bf:c3:da:84:1e:0c:dd:ca:bc:3e:4a:b0:e0:
         55:82:2b:9b:ca:8d:80:68:c2:06:13:3e:7b:68:c3:db:8f:17:
         d7:8d:83:c3:f4:b8:e3:03:54:2b:de:68:45:3b:24:61:68:99:
         79:9f:fe:81:af:0e:b7:1f:5e:e5:a7:61:19:b3:30:00:4a:25:
         ae:d5:6d:c1:10:3b:26:bc:27:9b:e5:d7:73:97:de:f6:77:33:
         27:3d:0b:20:d9:82:10:81:05:a6:1c:16:1a:aa:7e:95:07:3a:
         d4:e4:cc:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:56:34 2025 by rpki-client